figma-use-figjam
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional markdown files and code snippets. No executable code is provided that would run outside of the agent's sandbox environment.
- [SAFE]: No prompt injection or instructions intended to bypass safety guardrails were identified. The use of 'CRITICAL' or 'IMPORTANT' markers in the text is for instructional emphasis on Figma API requirements, such as font loading.
- [SAFE]: The skill does not contain hardcoded credentials, sensitive file access, or suspicious network communication. References to the 'upload_assets' tool are for legitimate FigJam image placement functionality.
- [SAFE]: All code examples follow secure and efficient Figma plugin development practices, including asynchronous font loading and node traversal using 'findAllWithCriteria'.
- [SAFE]: No obfuscation, dynamic execution of untrusted input, or persistence mechanisms were found across the analyzed files.
Audit Metadata